MAL-2026-721 Malicious code in dotenv-embedded (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07a4c23212d813ad58db347e1a5a152b003e1085b18036f047755d05de52fe0b The package dotenv-embedded was found to contain malicious code. Source: ghsa-malware bf0cfff747361e3a51fbd35f3018e05312b4bd030890362b89821789ab2adb5...

MAL-2026-719 Malicious code in chai-async-promised (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b03e745920fbf2f3b25c5f9bcd2cd6814de348ff5ae3a0c5d8832f2494b2770 The package chai-async-promised was found to contain malicious code. Source: ghsa-malware...

Malicious code in dotenv-embedded (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07a4c23212d813ad58db347e1a5a152b003e1085b18036f047755d05de52fe0b The package dotenv-embedded was found to contain malicious code. Source: ghsa-malware bf0cfff747361e3a51fbd35f3018e05312b4bd030890362b89821789ab2adb5...

Malicious code in http-emailjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9d03c741837fca8f8630f52d108b904dff1e056ff9b3bee73df663f691a59f The package http-emailjs was found to contain malicious code. Source: ghsa-malware cd9f06aa02e0e2ed77b3cedfb2e499b9f73530f95231f0fdc8dbeecc0bf2222a A...

MAL-2026-723 Malicious code in http-emailjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9d03c741837fca8f8630f52d108b904dff1e056ff9b3bee73df663f691a59f The package http-emailjs was found to contain malicious code. Source: ghsa-malware cd9f06aa02e0e2ed77b3cedfb2e499b9f73530f95231f0fdc8dbeecc0bf2222a A...

MAL-2026-722 Malicious code in express-groups-routes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d54e03ffa96877bc24a447c0a77e5c096894fd82176e5705d62713eb5f20f10 The package express-groups-routes was found to contain malicious code. Source: ghsa-malware...

Malicious code in reactt-sdkk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1040004e57d22b532a81d886c4a8d7847ea79a24950a31bc092da3f8ff0e46b The package reactt-sdkk was found to contain malicious code. Source: ghsa-malware 56b1676235be8d72d317cee06957d2c7c8b4a3e8fd215927e13b76fdcfe44384 An...

Malicious code in mongooose_update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0077f550d3b03f4fbc6ea54a833c0e5e80aba58bec307a6720065e7d08fafd12 The package mongoooseupdate was found to contain malicious code. Source: ghsa-malware f8f7054ae7149c28576adb91e81dabf2d46ed622ff6cb5d7ae81fec89a6d027...

Malicious code in ongose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1779f3d5601055650bab2b59f56ba51bc92366ccd49d815010ef67839f1257 The package ongose was found to contain malicious code. Source: ghsa-malware da279e18ef68f92cc1f02d94f9be7149d4664988f627ff7efbfcda617a237761 Any...

MAL-2026-716 Malicious code in si-wsl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f69e85a7d134f9914d7c06214a1e54622c4cd2548036f89a7de197a219cb598a The package si-wsl was found to contain malicious code. Source: ghsa-malware 883fa40693e776d8efd0a25d3d0cb70348f12f2226eaf627c28c490b46790973 Any...

apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams

An attacker who controls or compromises an APK repository used by apko could cause resource exhaustion on the build host. The ExpandApk function in pkg/apk/expandapk/expandapk.go expands .apk streams without enforcing decompression limits, allowing a malicious repository to serve a small,...

The Notepad++ supply chain attack — unnoticed execution chains and new IoCs

UPD 11.02.2026: added recommendations on how to use the Notepad++ supply chain attack rules package in our SIEM system. Introduction On February 2, 2026, the developers of Notepad++, a text editor popular among developers, published a statement claiming that the update infrastructure of Notepad++...

MAL-2026-690 Malicious code in fileupload-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 284fb08fce78b3881a87fa045e3cd78babfd4be9859ffd8be916952b1088fc19 The package fileupload-util was found to contain malicious code. Source: ghsa-malware 86e2a72f365ef548c52ca11a5bcfa8cbca1b7ff90e2e35aa34b8d9c2abb9c85...

MAL-2026-693 Malicious code in tailwindcss-forms-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c160bdf4857d48ea8df8ddf468e5a63432a60ced853eff31cbc5093966a044f The package tailwindcss-forms-kit was found to contain malicious code. Source: ghsa-malware...

Malicious code in fingerprint-stitch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 997a54dfe51f4c241904489b2db6fdc90f9da761dfaeb5f4e98747f508d4a78f The package fingerprint-stitch was found to contain malicious code. Source: ghsa-malware...

Malicious code in eslint-config-stitch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3747d49c7b72e1659dde0b66b3e7b95bd198fc6a8f8f37d9a7a1bc2fc76dd54 The package eslint-config-stitch was found to contain malicious code. Source: ghsa-malware...

MAL-2026-689 Malicious code in eslint-config-stitch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3747d49c7b72e1659dde0b66b3e7b95bd198fc6a8f8f37d9a7a1bc2fc76dd54 The package eslint-config-stitch was found to contain malicious code. Source: ghsa-malware...

MAL-2026-691 Malicious code in fingerprint-stitch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 997a54dfe51f4c241904489b2db6fdc90f9da761dfaeb5f4e98747f508d4a78f The package fingerprint-stitch was found to contain malicious code. Source: ghsa-malware...

Malicious code in eslint-config-nlx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9a74a6c52535673292fbe7e0b1b58a412da2ba3ebd7a06dd21e944f40bb22a9 The package eslint-config-nlx was found to contain malicious code. Source: ghsa-malware...

MAL-2026-688 Malicious code in eslint-config-nlx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9a74a6c52535673292fbe7e0b1b58a412da2ba3ebd7a06dd21e944f40bb22a9 The package eslint-config-nlx was found to contain malicious code. Source: ghsa-malware...